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AMENDMENTS TO THE CLAIMS 

This Listing of Claims will replace all prior versions and listings of claims in this 
application. 

Listing of Claims: 

1. (Currently amended) A central encryption management system, comprising: 
a plurality of communications terminals for performing data communications; 
an encryption apparatus which can be connected between the-a_plurality of 

communications terminals , the plurality of communications terminals for performing data 

communications ; 

the apparatus including encryption/decryption means for performing an encrypting 
process and a decrypting process on data to terminate encryption-based security between the 
communications terminals having the encrypting capability and the non-encrypting capability; 
and 

a manager terminal for inputting information for the presence or absence of 
encryption/decryption process, the availability of packet communications, the encryption level, 
the time period to perform encryption, the encryption policy, and the encryption key into each of 
the encryption apparatus and the communications terminals remotely from the manager terminal 
over a network, so that settings for the encrypted data communications on each of the apparatus 
and the terminals are completed, 

wherein the various information includes at least one of the presence/absence of the 
encrypting/decrypting process, the communicability indicating that a packet is instructing 
whether or not data packets are to be discarded between specific terminals after the data packets 
have been received , the encryption level, and t he time period for the encryptio n, the encryption 
policy for each division ; 

wherein the plurality of communications terminals, the manager terminal, and the 
encryption apparatus are connected via a cable or wireless network; 

wherein the encryption apparatus further includes bridge means for allowing data to be 
outputted as it is from another port without any routing process; and 
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wherein the data has been is received with one of-the a_plurality of ports of the encryption 
apparatus and the encrypting or decrypting process has been is performed on the data. 

2. (Original) The central encryption management system according to claim 1, wherein the 
encryption/decryption means performs the encrypting process and the decrypting process on 
data, so that the encryption apparatus receives and retransmits data in the form of encrypted data 
from and to the communications terminal having the encrypting capability, and the encryption 
apparatus receives and retransmits the data in the form of non-encrypted data from and to the 
communications terminal having no encrypting capability. 

3. (Canceled). 

4. (Original) The central encryption management system according to claim 1, wherein 
the encryption apparatus further includes setting information storage means for storing 

the information inputted from the manager terminal, in which the inputted information is used 
when controlling the encrypting process and the decrypting process, and 

the encryption apparatus controls the encrypting process and the decrypting process by 
comparing the information stored in the setting information storage means with header 
information of a data packet of the data received with one of the plurality of ports. 

5. (Currently Amended) A central encryption management system, comprising: 
a plurality of communications terminals for performing data communications; 

an encryption apparatus having a plurality of ports which can be connected between the-a 
plurality of communications terminals, in which the encryption apparatus performs encrypting or 
decrypting process on data which has been received with one port and then which has passed 
through a data link layer and a physical layer, and 

the encryption apparatus outputs the encrypted or decrypted data from another port 
through a data link layer and a physical layer without passing said data to a network layer in 
which routing between networks is controlled; and 
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a manager terminal for inputting information for the presence or absence of 
encryption/decryption process, the availability of packet communications, the encryption level, 
the time period to perform encryption, the encryption policy, and the encryption key, into each of 
the encryption apparatus and the communications terminals remotely from the manager terminal 
over a network, so that a setting of each of the apparatus and terminals for communicating 
encrypted data is completed, 

wherein the various information includes at least one of the presence/absence of the 
encrypting/decrypting process, the communicability indicating that a packet is instructing 
whether or not data packets are to be discarded between specific terminals after the data packets 
have been received , the encryption level, and the time period for the encryptio n, and the 
encryption policy for each division ; 

wherein the plurality of communications terminals, the encryption apparatus, and the 
manager terminal are configured to be connected via a cable or wireless network. 

6. (Original) The central encryption management system according to claim 5, wherein 
the encryption apparatus further includes setting information storage means for storing 

the information inputted from the manager terminal, in which the inputted information is used 

when controlling the encrypting process and the decrypting process, and 

the encryption apparatus controls the encrypting process and the decrypting process by 

comparing the information stored in the setting information storage means with header 

information of a data packet of the data received with one of the plurality of ports. 
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